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Create a failover cluster to 
get SQL Server up and 
running quickly in 

the event of a 

hardware failure. 


Handling Arrays 
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SQL for using arrays as input for stored procedures. 
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Change Data Capture 


—DbDerek Comingore 

The new asynchronous CDC feature built into the SQL 
Server 2008 relational database engine replaces the need 
to create custom CDC solutions and provides better 
performance. 
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Spatial Capabilities with 
Microsoft Virtual Earth 


—Tyler Chessman 
See how to put the SQL Server 2008 GEOGRAPHY and 
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Join the new SQL ferver 
Magazine forum on LinkedIn 
and invite your fellow DBAs, 
BI pros, and SQL Server developers to join, 


too. You don't have to be a subscriber to join, 
but we love that you are! To join go to 
www.linkedin.com/e/gis/ 1 163587. 

—Sheila Molnar, executive editor 
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Up in the Air 


over Cloud Computing 


[= very few years the tech industry goes gaga 
over a hot new technology. A few years back 
it was the thin client, then it was open source, then 
it was XML. Now pundits opine that the future is 
cloud computing, and if you’re not on the band- 
wagon, you'll be obsolete. However, when you look 
back at these other trends, you'll notice that each 
ended up being useful for a particular functional- 
ity. They didn't take over the IT world. 


The Silver Lining in the Cloud 

What's so compelling about cloud computing? 
Its essentially the cost savings. Theoretically, if 
you take advantage of computing services from 
the cloud (i.e., the Internet), your organization 
wouldn't need servers or the expensive databases 
that run on them. The company would save on 
infrastructure, licensing, and IT personnel who 
run the infrastructure. But the real benefit is for 
the hosting vendors, who like cloud computing 
because it offers a predictable, subscription-based 
income model, instead of the more uncertain tra- 
ditional software sales model. 


SQL Server in the Cloud? 

Because it's a line of business (LOB) application 
whose availability is paramount, SQL Server may 
seem like the last thing you'd expect to see in the 
cloud. But cloud services are exactly what SQL 
Server Services are all about. SQL Server Services 
give you access to a set of Microsoft-hosted SQL 
Server instances to provide global on-demand 
data. These services offer a subset of the database 
functionality found in SQL Server, which is prob- 
ably not appealing to most organizations running 
SQL Server. SQL Server Services don't replace 
SQL Server; rather, they're a data store for new 
web applications. SQL Server Services seem more 
likely to be adopted by other service providers 
than by typical organizations. They're a good way 
for Microsoft to dip its toes into the subscription- 
based pool. 


The Dark Side of the Cloud 
Cloud computing will certainly be a viable solution 
for applications whose functionality isn't required 
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one hundred percent of the time. I’m fine with us- 
ing the cloud for Google Gmail or Windows Live 
Mail. But it's not suitable for all applications. Do I 
want my desktop in the cloud? No. Do I want my 
companys file and print server in the cloud? No. Do 
I want my critical applications in the cloud? No. 

Why not? The first reason is availability. Although 
the Internet and most websites are almost always 
there, the truth is everyone has been frustrated 
when all or part of the web goes down. 

I'm also not sure if the cloud is secure enough. 
What do you think: Is it comforting or disturbing 
to entrust your confidential data to another com- 
pany? What about possible legal issues and data 
exposure if your cloud services company also pro- 
vides services for your competitors? 

Im uneasy about potential application inte- 
gration problems. Many organizations experience 
difficulty with application isolation caused by dif- 
ferent parts of the business running as independent 
islands. What would happen when if handed over 
integration with external 
services to a third par- 
ty managing the cloud? 
Could this loss of con- 
trol make a bad prob- 
lem worse? 

Finally there are 
those events we just 
can't predict. Stuff hap- 
pens. What do you do 
if the hosting company goes out of business? We 
all remember that many companies didn't make it 
when the dot.com bubble burst. And the economy 
doesn't look all that healthy right now. 


Don't Let Me Rain on Your Parade 
I'm not sold on cloud computing because I know 
the day I bet my core business processes on the 
cloud will probably be the day the Internet crashes. 
The cost savings offered by cloud computing just 
don't overcome my reservations about loss of con- 
trol. How about you? Are you ready for cloud com- 
puting and SQL Server Services? Drop me an email 
at motey(Øsqlmag.com or letters@sqlmag.com. FT 
InstantDoc ID 100580 


Michael Otey 


(mikeo@sqlmag.com) is technical director 
for Windows IT Pro and SQL Server Maga- 
zine and author of Microsoft SQL Server 

2008 New Features (Osborne/McGraw-Hill. 


Cloud services are exactly 
what SQL Server Services are 
all about. SQL Server Services 
give you access to a set of 
Microsoft-hosted SQL Server 
instances to provide global 
on-demand data. 
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Q Editor's Tip 


Share your SQL Server 
code, discoveries, and 
solutions to problems. 

Email your submission to 
rår OD sqlmag.com. Please 
include your full name 
and phone number. If we 
print your submission, 
you'll get $100. 

— Karen Bemowski, 
senior editor 
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ORE on the WEB 


Download the code at 
InstantDoc ID 100521. 


Don’t Let Poison Messages Kill Processing 
in SQL Server 2005’s Service Broker 


D recently worked on a project in which a large 
number of messages arriving from various servers 
had to be centrally processed on a single SQL Server 
2005 instance. I decided to use the asynchronous mes- 
sage queuing capabilities in SQL Server 2005's Service 
Broker so that I didn't have to write a lot of code. 

After some trial and error, I achieved the best per- 
formance with the XML validation and encryption 
switched off. This was acceptable because all our com- 
munications were occurring between trusted clients on 
a secure network. 

I tried to use the default stored procedure that 
Service Broker's activation feature uses when a custom 
stored procedure isn't provided. However, I encoun- 
tered a problem with the way in which the poison 
messages (i.e, messages containing information that 
an application can't process successfully) were handled. 
Service Broker's default error-handling behavior is to 
retry five times, then disable the queue. Because one of 
the project requirements was to process each message 
as quickly as possible, this default behavior wasn't 
acceptable. I needed a process that would put a poison 
message aside in an error table and allow the processing 
of good messages to continue. 

To obtain the process I needed, I wrote an activation 
stored procedure, usp qTarget Activation, that uses a 
RECEIVE statement to cache up to 500 messages in 
a table variable for batch processing. (The clients are 
using a single conversation to send many 
messages) This stored procedure performs 
message processing inside a TRY...CATCH 
construct. If an error is encountered, the 
transaction is rolled back and another stored 
procedure is called to remove the poison message from 
the queue. (Most of the errors encountered during 
XML message processing put the transaction into an 
uncommittable state, so the only way to deal with an 
error is to roll back the entire transaction and start 
another process to perform a cleanup.) 

The usp SB ErrorManager stored procedure 
performs the poison message cleanup. When an 
error is encountered, usp qTarget Activation calls 
usp SB ErrorManager, with the conversation handle 
and poison message's queuing order number as 
parameters. First, usp SB ErrorManager disables 
activation on the queue to briefly pause message pro- 
cessing during its run. Next, it processes the queued 


messages from the offending conversation up to the 
poison message. Nonpoison messages are sent back to 
the queue. Re-queuing is acceptable because the order 
of messages isn't important. If the order is important, 
usp SB ErrorManager could be written to process 
good messages instead of re-queuing them. I chose 
the re-queuing approach to avoid duplicating message 
processing code in the error handler. 

When usp SB ErrorManager reaches the poison 
message, no XML parsing or validation is performed 
to avoid the error that caused the problem in the first 
place. Instead, usp SB ErrorManager inserts the 
entire message into in a VARBINARY field in a special 
error table for troubleshooting later. Finally, the stored 
procedure enables queue activation and exits, enabling 
the regular service broker processing to continue. If 
another poison message is encountered, the whole 
process is repeated. 

Another way to ensure continuous processing of 
good messages would be to avoid errors by validating 
every message. However, this approach would place 
significant processing overhead on the system. In addi- 
tion, even the most extensive validation can overlook 
some error conditions, thereby exposing the system to a 
risk of downtime. My approach ensures that all errors 
are handled only when they actually happen. In a well- 
written system, errors rarely occur, so this approach 
improves overall system performance because you 
aren't wasting resources on validating every message. 

You can download the code needed to implement 
this approach on your system. Go to www.sqlmag.com, 
enter 100521 in the InstantDoc ID text box, and 
click the 100521.zip hotlink. The .zip file contains 
the following seven scripts: 01CreateDatabase.sql, 
02CreateTables.sql, 03CreateErrorManagerProc.sql, 
O4CreateInitiatorQueueActivationProc.sql, 05Create- 
TargetQueueActivationProc.sql, 06CreateService- 
BrokerObjects.sql, and 07SendMessages.sql. 

After you’ve downloaded the scripts, run them on a 
SQL Server 2005 instance in the order depicted by their 
filenames to create a database and deploy all the Service 
Broker components. The last script sends some sample 
messages to Service Broker. One of the messages con- 
tains invalid data to illustrate the error handling. Er 

—Dejan Nakarada-Kordic, 
ASB Bank (New Zealand) 
InstantDoc ID 100521 
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Turn Business 
Intelligence Into 
Business Advantage 


ALTERNATIVE THINKING ABOUT BUSINESS INTELLIGENCE: 


Alternative thinking isn't just about access to statistics and 
information. It's about delivering the insights you need to make 
intelligent decisions that differentiate your company from 
everyone else. 


It’s about relying on HP ProLiant and Integrity systems to run 
SQL® Server™ 2008, so you can focus your efforts on business 
innovation. (And how cool is that?) 


It’s about working in close partnership with HP to instantly turn 
your most relevant information into informed business 
decisions. (And look oh-so-smart in the process.) 


It’s about experiencing a change-ready BI infrastructure that 
delivers actionable insight wherever it needs to be — turning 
your company into a competitive leader. (And what’s not to 


love about that?) 


Technology for better business outcomes. 


HP Business Intelligence (BI) 

* Over 2,000 BI solutions for Fortune 500 and Global 2000 customers 

* Microsoft's SQL Accelerator for Bl was developed on HP ProLiant platforms 
* Almost 50% of SQL Server users build their Bl on HP Servers 
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ORE on the WEB 


See the web figures at 
InstantDoc ID 100466. 


AUTHOR’S NOTE 
As always, we want to hear your feedback 
on the Tool Time discussion forum at 
sqlforums.windowsitpro.com/web/forum/categories 
.aspx?catid=169&entercat=y. 


SQL Server 2008 
Extended Events Manager 


Easily manage all the objects and metadata 
used by the Extended Events engine 


S Server 2008 includes a powerful new 
Q troubleshooting and diagnostic feature, 
Extended Events, that's designed to support the correla- 
tion of SQL Server data, OS data, and database appli- 
cation data using Event Tracing for Windows (ETW). 
This month's free tool, SQL Server 2008 Extended 
Events Manager, which was created by enterprise DBA 
Jonathan Kehayias, gives you full control over Extended 
Events. This is no small feat—working with Extended 
Events is quite difficult without thorough insight into 
the metadata from applicable SQL Server Dynamic 
Management Views (DMVs). 

Extended Events Manager is an easy to use, multiple- 
document interface-style utility that you can use to 
create, modify, and delete all the objects and metadata 
used by the Extended Events engine in SQL 
Server 2008. Furthermore, Extended Events 
Manager can save information in an XML 
document through a custom library. You can 
also use the custom library programmatically 
in development projects and PowerShell scripts to call 
Extended Events Manager. 


Managing Extended Events 

To create or modify Extended Events, first connect to 
a SQL Server 2008 instance using Extended Events 
Manager, which is shown 
in Web Figure 1 (www 
.sqlmag.com, InstantDoc 
ID 100466). Once you're 
connected to the SQL 
Server instance, you can 
create new event sessions 
or view the XEvent meta- 
data within the Extended Events engine on the server 
by selecting either the New Event option or the View 
XEvent Metadata option from the File menu. 

Once you've selected an Extended Events session 
on the server, you can drop, start, stop, and script out 
the session by right-clicking it. Dropping, starting, or 
stopping a session immediately executes the appro- 
priate Extended Events command against the server. 
Starting or stopping the session enables or disables 
Extended Events on the SQL Server instance, respec- 
tively. If you want to script a session, you're provided 


with a GUI that's similar to SQL Server Management 
Studio (SSMS) and have the option of scripting to a 
file, the clipboard, a message box, or directly to a new 
SSMS window. You can define and alter all the proper- 
ties of objects used in Extended Events management, 
including events, sessions, targets, and predicates, via 
the Event Editor, which is shown in Web Figure 2. 
Extended Events Manager also includes the ability to 
check for new releases of it. 

In addition, you can use Extended Events Manager 
via PowerShell. You can load it into PowerShell using 
a command similar to the following: 


[reflection.assembly]::LoadWi thPartialName 
("ExtendedEventsManager. Library") 


The tool's documentation describes how to integrate 
Extended Events Manager into your PowerShell 
scripts, as well as how to perform several activities 
using it in PowerShell. The Extended Events Manager 
library includes a navigational provider that lets you 
use Extended Events as a drive, similar to how the SOL 
Server 2008 provider works in PowerShell. 


System Configurations 
Extended Events Manager runs on all editions of 
SQL Server 2008 (Extended Events aren't available in 
SQL Server 2005 or SOL Server 2000), as well as both 
32-bit and 64-bit systems. It also runs on Windows 
Server 2008, Windows Vista, Windows Server 2003, 
and Windows XP. [SQL 
InstantDoc ID 100466 


SQL SERVER 2008 EXTENDED 
EVENTS MANAGER 


BENEFITS: This tool takes the pain out of 
creating and managing Extended Events, 
sessions, and metadata files. 


SYSTEM REQUIREMENTS AND NOTES: SQL 
Server 2008; Windows Server 2008, Windows 
Vista, Windows Server 2003, and Windows XP 


HOW TO GET IT: You can download Extended 
Events Manager from www.codeplex.com/ 
ExtendedEventManager. 
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p 'SOL* Embarcadero? Change 
results in less than 60 minutes. 


Embarcadero products let you access your databases from a single 
application window — so you can manage multiple databases, across 
different DBMS platforms. No other products or native tools let you do 
that. So, why waste your time on anything else? 


Try it for FREE and see for yourself! We are so sure that you can 
achieve real benefits in real time that we're offering you the chance to 
try all of Embarcadero's products for FREE in a 14 day trial. Just visit 
www.embarcadero.com/challenge to download your copy now! 


paArtisan 


in 


Embarcadero Technologies is throwing down 

the gauntlet to all database administrators, 

developers and data modelers. We have 

compiled a number of common database 

problems and each task has an estimated time for completion 
— but we challenge you to do them even faster! 


To get started, simply download your evaluation software and 
click on the ‘db FEST - Take the Challenge’ icon to check out the 
step-by-step guide. Then simply record the time taken to complete 
each task, return the form to us and you will automatically receive 
a FREE Embarcadero ‘db FEST tour’ t-shirt — and the chance to 
win an even bigger prize! 
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a SQL Server 


Denny Cherry 


(dcherry @ awarenesstech.com) has 
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SQL Server and is currently a senior 
database administrator and architect at 
Awareness Technologies. He holds several 
Microsoft certifications as well as being a 
Microsoft MVP. 
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ervers and systems have outages—it’s a fact 

of life in IT. Clustering SQL Server instances 

gives us a measure of protection against these 
failures. Even in well laid out environments in which 
web and application servers have redundant backups, 
the SQL Server system is usually just sitting there as 
a single point of failure, despite taking the longest 
time to repair and restore. (Getting a database server 
set up and the database restored to it from tape will 
take several hours or days, depending on the speed 
of the restore and the size of the database.) You can 
avoid hardware and application downtime by setting 
up a SQL Server cluster in your environment. In this 
article, I'll explain how clustering works and the hard- 
ware and software that’s needed to create a SQL Serv- 
er cluster. In addition, I'll show you how to create a 
failover cluster using SQL Server 2005 and Windows 
Server 2003 Enterprise Edition. 


How Clustering Works 
When you get right down to it, clustering is a fairly 
basic concept. A service runs on each node of the 
cluster and checks to see if the SQL Server service is 
running on any of the nodes. If the SQL Server ser- 
vice isn’t running on any nodes, then it’s started on 
one of the nodes. What's actually happening under 
the hood during this process is a bit more complex. 
When you install SQL Server in a clustered con- 
figuration, the services are actually installed on all the 


LEARNING PATH 
SQL SERVER MAGAZINE RESOURCES 


For more information about clustering: 


“Disk Configuration for Failover Clustering,” 
InstantDoc ID 96381 


“Active/Passive vs. Active/Active Clustering,” 
InstantDoc ID 44938 


“Clustering SQL Server,” InstantDoc ID 40034 


nodes in the cluster. (Note that SQL Server must be in- 
stalled using the clustering option; you can’t change a 
single-server installation into a clustered installation.) 
If you go into Administrative Tools, Services on any 
node, you'll see all the SQL Server services in manual 
startup mode. When SQL Server is running in a cluster, 
the service runs on only one physical node at a time. 
If you manually move the service from one node to 
another, you're actually stopping the service on one 
machine and restarting it on another machine. 

When the machine running SQL Server goes off- 
line (e.g., because of a hardware failure), the passive 
SQL Server system will detect that the active SQL 
Server system has gone offline, and take ownership of 
the SQL Server service, as well as the other resources 
in the resource group (e.g., IP address, network name, 
disk drives), and bring the service back online. With 
SQL Server 2000, this process can take several sec- 
onds to several minutes, depending on how much 
data is in the transaction log to be rolled forward and 
back. SQL Server 2005 starts up much faster because 
it rolls forward any completed transactions, brings 
the database online, and then rolls back any com- 
pleted transactions. 


Hardware and Software 
Requirements 

Clustering isn’t easy to set up, nor is it cheap. You need 
at least two servers and a shared storage solution. Al- 
though the servers don't need to be identical, configu- 
ration is easier if they are. It's recommended that the 
servers have at least the same number of CPUs and 
the same amount of RAM. Technically, it isn't neces- 
sary for the CPU count and RAM to match, but it 
does make it easier to estimate the load the backup 
server can take. Using identical servers also gives you 
the luxury of not having to worry about which server 
the database is running on because all servers will per- 
form the same. 


SQL Server Magazine * www.sqlmag.com 


Everything you need to know to set up 
a failover cluster in your environment 


The storage can't be the RAID array that you plug 
into the server. Instead, it must be an array specifi- 
cally designed to be used in a cluster (1.e., shared stor- 
age). This storage is most often handled by a Fibre 
Channel or iSCSI SAN solution; however, the major 
server vendors all have SCSI or Serial Attached SCSI 
(SAS) solutions that can be used as well. 

The version of SQL Server and the number of 
nodes (servers) in your cluster will determine what 
software you need to purchase. The same rules ap- 
ply to both 32-bit (x86) and 64-bit (x64 or Itanium) 
systems. You must be running Windows Server 2008 
Enterprise Edition, Windows Server 2003 Enterprise 
Edition, or Windows 2000 Server Enterprise Edition 
to cluster. If you want to cluster more than four nodes, 
Server 2008 Enterprise Edition, which supports up to 
16 nodes, or Windows 2003 Enterprise Edition, which 
supports up to eight nodes, is required. If you're using 
a SCSI, SAS, or Serial ATA (SATA) storage array, 
the maximum number of nodes that are supported 
is two, no matter which OS or SQL Server edition 
you're running. Table 1 shows the number of nodes 
supported by each version and edition of SQL Server. 
To create a cluster of more than two nodes, both the 
OS and SQL Server must be an edition and version 
that supports being clustered in that configuration 
(e.g., a three-node SQL Server 2005 cluster requires 
Win2K Enterprise Edition or later and SQL Server 
2000 Enterprise Edition or later). 

For Windows 2003 and Win2K clusters, all the 
servers must have a static IP address and be on the 
same subnet that the cluster IP address will be on. 
(Although Server 2008 supports cluster nodes being 
on different subnets and using DHCP for the IP ad- 
dresses, I recommend using static IP addresses in the 
same subnet for simplicity.) In addition, each SQL 
Server instance will need an IP address and cluster 
name. These are required so that each SQL Server in- 
stance can fail over from one node of the cluster to 
another node independently of the other SQL Server 
instances. 


Planning the Cluster 

Just as with any other database, you'll want your data 
files, log files, and tempdb to be on different volumes 
on the server and in different RAID groups within 
the SAN. You don't want the high writes of the temp- 
db and the logs to get in the way of the reads for the 
database. When dealing with very large databases, 
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you might find that 26 drive letters just aren't enough. 
You might consider using mount points within your 
drive letter to assign additional drive space and I/O 
capacity to the drive. For more information about 
mount points, see the web-exclusive sidebar "Creating 
Mount Points" (www.sqlmag.com, InstantDoc ID 
100398). Note that if you're going to be installing 
more than one SQL Server instance, make sure to al- 
locate each instance its own drive letter. When clus- 
tered, each instance has to have its own drive because 
each instance is in its own resource group. 

Each node will need not only an IP address but 
also a heartbeat IP address. A heartbeat IP address 
is typically a different subnet than the IP subnet that 
your network uses. The heartbeat IP address is a 
cross-connect cable going between the servers in the 
cluster. In a cluster with three or more nodes, a net- 
work switch will be needed, as all the machines” heart- 
beat network adapter cards have to be on the same 
network. The heartbeat network is the network that 
the Windows cluster service uses to see if the other 
machines within the cluster are working correctly. 

In addition, you'll need an IP address to cluster 
the Windows OSs together, including the Quorum 
drive and any Windows services that need to be clus- 
tered. Also, you'll need to assign an IP address to 
SQL Server. 

You'll also need to have several names for your 
cluster. Each node will need its own name, as does 
the server that holds the Quorum and other clus- 
tered Windows services. In addition, each SQL 
Server instance will need its own host name because 
each instance has its own IP address, so host names 
can't be shared. This situation is where a good nam- 
ing convention comes in very handy. Us- 
ing a generic name with an incrementing 
number works fine for standalone servers, 
but can be challenging to manage when 
you start clustering. Extending the naming 
convention to fit clusters is necessary. For 


Using a generic 
name with an 
incrementing 


number works 


fine for 
standalone 
servers, but 
can be 
challenging 
to manage 


when you start 


clustering. 


ORE on the WEB 


See the web figures at 
InstantDoc ID 100400 and 
read the web-exclusive sidebar 


at InstantDoc ID 100398. 


TABLE |: The Number of Nodes Supported by 


Each SQL Server Version and Edition 


SQL 2000 SQL 2005 
2 Node Cluster Enterprise Edition Standard Edition 
3-4 Node Cluster ^ Enterprise Edition Enterprise Edition 
5+ Node Cluster N/A Enterprise Edition 


SQL 2008 
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Enterprise Edition 
Enterprise Edition 
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SQL SERVER CLUSTERING 


example, name the hosts SOLO1A and SQLOIB and 
name the Windows cluster SQLOI. This naming 
convention tells you that SOLO1A and SQLO1B are 
the nodes and that SQLOI is the base of the clus- 
ter. Name the SQL Server cluster SOLO1VOI. This 
name tells you that SQLO1VOI is the first server on 
the Windows cluster. If you need to install a sec- 
ond instance, you would name it SQLO1V02, with 
each instance being a separate server in the SOLOI 
cluster. 

When configuring the cluster, you'll be prompted 
for a domain account, which will be used to moni- 
tor the cluster. Don't use your personal domain ac- 
count; instead, set up a separate account on the 
domain for this purpose. This account will need 


Open Connection to Cluster 


TT TA 
m — -] P. , | 


[ ox ] ce | 


Figure I 


Using the Open Connec- 
tion to Cluster dialog box 
to create a new cluster 


administrative rights to all nodes in the cluster, 
and it will need to be able to log in to SQL Server. 
This account doesn't need to be a member of the 
sysadmin fixed server role; it only needs to be 
able to connect to SQL Server. If the account 


Proposed Cluster Configuration 
Verily that you want to create a cluster with the following configuration. 


Select the resource or resource type that you woud like to 
use lor the Quorum resource 


To create a cluster wih this configuration, cick Newt 
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Figure 2 
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doesn't have rights to log in to the instance, the 
database will fail back and forth between the 
nodes until you force the database online and 
add the login. If you plan to remove the BUILT- 
IN\Administrators group from SQL Server as part of 


your security lockdown, make sure to add this new 
account as a login to the SQL Server instance that's 
removing the BUILTIN Administrators group. 

Finally, you need to preconfigure the Domain 
Groups for Clustered Services page. These are Win- 
dows domain groups that contain the domain accounts 
that will run the various services. These groups will 
be given administrative rights within the SQL Server 
instance, so they should contain only the domain ac- 
count that the SOL Server instance will run under. 
Three domain groups are needed; however, if the full 
text service, SOL Server Agent service, and SQL Server 
service all run under the same domain account, only 
one domain group is needed. 


Creating and Configuring 

the Cluster 

Now that you've planned for your SQL Server cluster, 
you can configure the cluster and install SQL Server. 
Open the Cluster Administrator from the Start, Pro- 
grams, Administrative Tools menu and sélect Create 
new cluster from the Action drop-down menu, as 
shown in Figure 1. Next, select.the domain that the 
servers are located in and enter the cluster name (in 
this case SQLOI) in the Cluster name text box of the 
New Server Cluster Wizard. On the next screen, enter 
the username, password, and domain of the account 
that will be used to monitor the cluster. 

If you have more than one disk configured on 
the server when you configure the cluster, click the 
Quorum button and make sure the selected disk is 
set up in the Cluster Configuration Quorum dialog 
box, which is shown in Figure 2. The quorum disk 
should be a dedicated disk not used for application 
data or SQL Server data files. It needs to be only 1GB 
in size, although larger disks will work just fine. If ev- 
erything is configured correctly, the following screen 
will look similar to Web Figure 1 (www.sqlmag.com, 
InstantDoc ID 100400). After closing the New Server 
Cluster Wizard, you can see the Cluster Administra- 
tor connected to the cluster, as shown in Figure 3. 

Now add the second node of the cluster using 
the Add Nodes Wizard, which you can access via the 
Cluster Administrator. Click the File drop-down and 
select Open. Then select Add nodes to cluster from the 
Action drop-down menu and enter the cluster name in 
the Cluster or server name field, as Web Figure 2 shows. 
You can add one machine or many machines using the 
New Nodes Wizard. If all the nodes are configured 
correctly, the task bar will be green. Enter the password 
for the cluster account on the Cluster Service Account 
page. Note that if an incorrect password is entered, the 
wizard will still let you continue to the next screen. Two 
pages past the Cluster Service Account page is where 
the password will be verified. Once the cluster has been 
configured correctly, the task bar will turn green. 
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Next, create the resource group for the 
SQL Server instance and add the storage 
to it. To create a new resource group from 
within the Cluster Administrator, right- 
click Groups, select New, and then Group. 
To move your storage resources into the 
resource group, select the group the storage 
resource Is currently in, drag and drop the 
resource into the new group, and click Yes in 
the two pop-up windows that appear. 

Now you can install SQL Server on the 
cluster. The primary differences between 
a standard SQL Server installation and a clustered 
installation are that you have to select the resource 
group to mstall SQL Server into, assign a virtual 
name and IP address to the SQL Server instance, 
and provide SQL Server with the Windows domain 
groups that contain the domain accounts that run the 
services. When selecting the resource group, the disk 
resources must be online-and there can't be another 
SQL Server instance in that resource group. When se- 
lecting the location of the binaries, don't install them 
on shared storage. The binaries should be installed 
on local storage. The SQL Server installer will auto- 
matically install the binaries on all the SQL Server 
instances in the cluster. Because the installer does so, 


SQL SERVER CLUSTERING 


the installation will take a little longer than usual. 

Proceed through the license and preinstallation 
requirements. Note that the System Configuration 
Check screen, shown in Web Figure 3, will take a 
while to load because it's checking all the nodes in the 
cluster. When selecting the services, select the Create 
a SQL Server failover cluster check box, which is lo- 
cated below the SQL Server Database Services check 
box, as Figure 4, page 16, shows. If you want to have 
SQL Server Integration Services (SSIS) installed on 
the cluster, you'll need to install SSIS manually on 
each node and cluster it manually. 

To install SSIS on the second node, run through 
the SQL Server installer on that node and select only 


Figure 3 
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cluster 
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n-] Microsoft SQL Server 2005 Setup 


Components to Install 
Select the components to install or upgrade. 


IV SQL Server Database Services 
[v Create a SQL Server failover cluster 


[^ Analysis Services 


je , 
r 
[7 Notification Services 
Iv Integration Services 
[7 Workstation components, Books Online and development tools 


For more options, click Advanced. Advanced | 
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Figure 4 


Selecting the services 
to be installed on the 
clustered server 


the SSIS service from the service list page. After SSIS 
is installed on both nodes, open the Cluster Admin- 
istrator and connect to the cluster. Right-click the 
resource group you want to put the SSIS service 
into, and select New, Resource. Enter SQL Server 
Integration Services as the resource name and select 
Generic Service from the Resource type drop-down 
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menu. On the following screen, select the nodes that 
will run the SSIS service and click Add. On the next 
screen, select the Cluster Name resource and click 
Add. (If youre installing into the same resource 
group as the SQL Server, the resource name will be 
SQL Server Name.) Enter MsDtsServer in the Ser- 
vice name text box, leaving the Start parameters text 
box blank. Leave the Registry Replication list blank 
and finish the wizard. Then enter the new failover 
cluster name. 

On the Virtual Server Configuration page (shown 
in Web Figure 4), enter the IP address that SQL Serv- 
er will be listening on (i.e., the failover cluster’s IP 
address) and click Add. Make sure that the network 
adapter card that’s selected is the public network, not 
the heartbeat network. Select the cluster group and 
enter the path to the data files and logs, as Web Figure 
5 shows. Then select the nodes of the cluster that SQL 
Server will be installed on, as shown in Web Figure 
6. These are the nodes that have the potential to host 
the SQL Server service. Required node is the node that 
you're currently logged in to, and the Available nodes 
are the other nodes in the cluster. 

Next, enter the password for the account that you 

used to log in to the server. This password is used to 
authenticate against the other nodes of the clus- 
ter so that SQL Server can be installed. Next, 
enter the username, password, and domain for 
the account that will be running the SQL Server 
services. When using a cluster, you can't run the 
SQL Server services under the local system ac- 
count. Instead, you must run them under a do- 
main account. The Domain Groups for Clustered 
Services dialog box will then prompt you to select 
three domain groups. You'll need to enter one or 
more domain groups. The membership of each 
group should be the domain account that runs 
the respective service. The SQL Server installer 
will then ask you for the systems administrator 
password, authentication modes, and collation. 
When the SQL Server installer has finished on 
both nodes, the installation is complete, and you 
can connect to SQL Server using the name as- 
signed to the SQL Server clustered instance dur- 
ing installation. 


Reducing Downtime 

Although clustering SQL Server can be expensive 
when designed and configured correctly, a SOL 
Server cluster can provide you with a reliable up- 
time solution to host your database platform on. 
This extra uptime lets you rest easy when hard- 
ware problems arise, and outages last only a few 
seconds—instead of minutes—when Windows 
needs to be patched and rebooted. SQL] 


InstantDoc ID 100400 
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“Arrays 


Using arrays as input for stored procedures 


but there’s a common need to develop proce- 

dures that accept an unknown number of input 
parameters. For example, suppose you need to create a 
procedure in the Northwind database that accepts an 
unknown number of order IDs as input and returns 
information from the Orders table about the requested 
orders. One of the most obvious solutions is to use 
dynamic SQL. This option is available in SQL Server 
2008, 2005, and 2000. 


IN tored procedures don't support arrays as inputs, 


Implementing the Solution 

To use the dynamic SQL solution, run the code in 
Listing 1 to create the stored procedure usp_getorders. 
The implementation of the procedure is very simple. 
The procedure accepts a character string parameter 


LISTING I: 


USE Northwind; 

IF OBJECT ID('dbo.usp getorders', 
DROP PROC dbo.usp getorders; 

GO 

CREATE PROC dbo.usp getorders(Garr AS NVARCHAR(2ØØØ) ) 

AS 


Defining Usp getorders 


'P') IS NOT NULL 


DECLARE @sq] AS NVARCHAR(2399) ; 


SET (sql = N'SELECT OrderID, OrderDate, CustomerID, EmployeeID 


FROM dbo.Orders 
WHERE OrderID IN(' + Carr + N');'; 


EXEC sp executesql (sql; 
GO 


called @arr that holds a comma-separated list of order 
IDs as input. The procedure constructs a character 
string with a query against the Orders table in a vari- 
able called (Qsql. In the query's filter the code concat- 
enates the contents of @arr in the parentheses of the 
IN predicate. Finally, the code uses the sp executesql 
procedure to dynamically execute the code residing in 
the @sq variable. 

I restricted the input parameter @arr to 2,000 
characters. If you need to support longer strings, SOL 
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Server 2000 lets you go up to 4,000 characters with the 
NVARCHAR data type and 8,000 characters with VAR- 
CHAR (which will require you to use EXEC instead 
of sp executesql). In SQL Server 2005, you can use 
NVARCHAR(MAX) or VARCHAR(MAX) and go up 
to the maximum supported large object size (2GB). 

Run the following code to test the procedure with 
two different sets of order IDs: 


EXEC dbo.usp getorders N'10248,10250,10249' ; 
EXEC dbo.usp getorders 
N'10260,10270,10265,10290' ; 


For each invocation, the procedure constructs a query 

string in which the comma-separated order IDs appear 

as constants, then executes it. The query returns infor- 

mation from the Orders table about the requested 
orders. For example, the first invocation of 
the procedure returns the output 
in Table 1. 


Limitations 
Unfortunately, the dynamic SQL 
solution has serious disadvantages. These 
drawbacks include security, performance, 
and limited control over the order of rows 
in the output. 

Security. The procedure uses dynamic 
SQL without validating the input, which 
completely exposes the procedure to SQL 
injection. To see how easy it is to inject code here, run 
the following command: 


TABLE |: Output of Usp getorders 
OrderID OrderDate CustomerID 
10248 1996-07-04 00:00:00.000 VINET 
10249 1996-07-05 00:00:00.000  TOMSP 
10250 1996-07-08 00:00:00.000 HANAR 
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LISTING 2: Usp getorders Procedure 
with Input Validation 


IF OBJECT ID('dbo.usp getorders', 'P') IS NOT NULL 
DROP PROC dbo.usp getorders; 


GO 


CREATE PROC dbo.usp getorders(Garr AS 


NVARCHAR (2000) ) 
AS 


IF @arr LIKE N'%[AQ-9,]%' 
BEGIN 


RAISERROR('Input may contain SQL injection. 


HANDLING ARRAYS 


EXEC dbo.usp getorders N'Ø); RAISERROR( ''This 
could have been much worse than a RAISERROR 
statement.'', 16, 1); --'; 


The dynamic batch that is constructed by the stored 
procedure is: 


SELECT OrderID, OrderDate, CustomerID, EmployeeID 

FROM dbo.Orders 

WHERE OrderID IN(Ø); RAISERROR( 'This could have 
been much worse than a RAISERROR statement.', 
16, 1); --); 


In this example I injected a RAISERROR statement 
to the code for demonstration purposes, but a real 
injection would likely be much worse. This call to the 
stored procedure produces an empty set as output 
because I specified only one order ID that doesn't exist 
(order ID 0), followed by the output of the injected 
RAISERROR statement. 

You can try to prevent the injection by inspecting 
the input. In our case the input should have only digits 
and commas, so input validation is simple. Add the 
following code at the beginning of the stored procedure 
to check whether the 
input contains any char- 
acter other than a digit 
or a comma, and if it 
does, raise an error and 
return from the proce- 
dure without executing 
the dynamic batch: 


IF @sql LIKE N'%[AØ- 


Procedure aborted.', 16, 1); 


RETURN; 
END 


DECLARE @sql AS NVARCHAR(23ØØ); 


SET (sql = N'SELECT OrderID, OrderDate, CustomerID, 


EmployeeID 
FROM dbo.Orders 


WHERE OrderID IN(' + @arr + N');'; 


EXEC sp executesql sql; 
GO 


9,1%' 
BEGIN 
RAISERROR(' Input 
may contain SQL 
injection. Procedure 
aborted.', 16, 1); 
RETURN; 
END 


LISTING 3: Usp_getorders Procedure with GUID 


IF OBJECT ID('dbo.usp getorders', 'P') IS NOT NULL 
DROP PROC dbo.usp getorders; 


GO 


CREATE PROC dbo.usp getorders(Garr AS NVARCHAR(2ØØØ)) 


AS 


IF (arr LIKE N'%[AQ-9,]%' 


BEGIN 


RAISERROR('Input may contain SQL injection. Procedure aborted.', 16, 1); 


RETURN; 
END 


DECLARE @sql AS NVARCHAR(2399) ; 


SET @sql = N'SELECT OrderID, OrderDate, CustomerID, EmployeeID 
/* DDAF1499-A7FF-4A9C-AE83-FCE5A33F5151 */ 


FROM dbo.Orders 


WHERE OrderID INC + Carr + N');'; 


EXEC sp executesql (sql; 


GO 
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Run Listing 2 to create the revised procedure. 
Try injecting code through the revised procedure by 
running the following command: 


EXEC dbo.usp getorders N'Ø); RAISERROR( ''This 
could have been much worse than a RAISEERROR 
statement.'', 16, 1); --'; 


This time you get the following error: 


Msg 50000, Level 16, State 1, Procedure usp_ 
getorders, Line 11 

Input may contain SQL injection. Procedure 
aborted. 


However, if the input isn't restricted to digits and 
commas (e.g., when the elements in the array are sup- 
posed to be character strings), you'll find it difficult 
to guarantee a validation that leaves absolutely no 
exposure to SQL injection. (For more information, see 
SQL Server Books Onlin—BOL—'SQL Injection" at 
msdn.microsoft.com/en-us/library/ms161953.aspx.) 

Performance. When a query has a plan in cache, in 
order for subsequent query invocations to be able to 
reuse the cached plan, the query strings (that of the 
query for which the plan was cached and those of the 
subsequent query invocations) need to be the same. 
The exception is when SQL Server auto parameterizes 
the query, but this exception doesn't apply to our pro- 
cedure. For each unique input to our procedure, a dif- 
ferent query string is constructed, and therefore a new 
plan is produced and cached. Instead of optimizing the 
query only once and reusing the cached plan in all sub- 
sequent invocations of the procedure, SQL Server will 
reoptimize almost every time the procedure is invoked, 
thus generating a large number of execution plans. To 
demonstrate plan caching and reuse behavior, I'll use 
the version of the procedure that you create by running 
the code in Listing 3. 

As you can see in the procedure's code, I incorpo- 
rated a GUID as a block comment within the query. 
Based on this GUID, it will be easy to locate the plans 
specifically associated with the query of interest in 
cache. After creating the procedure with the GUID 
as a comment, run the following code to execute the 
procedure with two different inputs: 


EXEC dbo.usp getorders N'10248,10250,10249' ; 
EXEC dbo.usp getorders 
N'10260,10270,10265,10290' ; 


You can locate the plans associated with our pro- 
cedure and dynamic batch by querying sys.syscache 
objects (or master.dbo.syscacheobjects, in versions 
before SQL Server 2005). This object has a row for 
each plan in cache. You can look for plans in which 
the SQL text (sql attribute) contains the specific GUID 
you planted as a comment. Assuming you executed the 
stored procedure twice with different arguments as I 
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TABLE 2: Cached Plans for Procedure Using Dynamic SQL 


objtype usecounts sql 

Prepared 1 SELECT ... WHERE OrderlD IN(10260,10270,10265,10290); 
Prepared = 1 SELECT ... WHERE OrderlD IN(10248,10250,10249); 

Proc 2 CREATE PROC dbo.usp_getorders(@arr AS NVARCHAR(4000)) 


LISTING 4: Usp_getorders with RECOMPILE 


IF OBJECT ID('dbo.usp getorders', 'P') IS NOT NULL 
DROP PROC dbo.usp getorders; 

GO 

CREATE PROC dbo.usp getorders(Garr AS NVARCHAR(2ØØØ)) 


IF (arr LIKE N'%[AQ-9,]%' 

BEGIN 
RAISERROR('Input may contain SQL injection. Procedure aborted.', 16, 1); 
RETURN; 

END 


DECLARE @sq] AS NVARCHAR(23ØØ); 


SET @sql = N'SELECT OrderID, OrderDate, CustomerID, EmployeeID 
/* 995F4DF8-6518-47EE-ABYE-2E2876DA17ØØ */ 

FROM dbo.Orders 

WHERE OrderID IN(' + @arr + N') 

OPTION(RECOMPILE) ; ' ; 


EXEC sp executesql sql; 
GO 


TABLE 3: Cached Plans for Procedure 
Using Dynamic SQL and RECOMPILE Query Option 


objtype 
Proc 2 


usecounts sgl 


CREATE PROC dbo.usp_getorders(@arr AS NVARCHAR(4000)) 


suggested, run the following code to inspect the plans 
associated with our query in cache: 


SELECT objtype, usecounts, sql 

FROM sys.syscacheobjects -- in 2000 query master. 
dbo.syscacheobjects 

WHERE SQL LIKE '%DDAF1499-A7FF-4A9C-AE83- 
FCESA33F5151%' 
AND sql NOT LIKE '%sys%'; 


For each plan in cache, the query returns the object 
type (Proc for procedure plan, Prepared or Adhoc 
for a prepared statement such as one prepared by 
sp executesql), a count of how many times the plan 
was used, and the SQL text for which the plan was 
created. This query returns the output in Table 2. Note 
that in SQL Server 2008 the objtype attribute will show 
Adhoc instead of Prepared. 

Dynamic SQL operates in its own batch and isn’t 
considered part of the batch of the calling procedure; 
therefore, you get separate plans for the procedure (Proc 
object type) and the dynamic batches (Prepared or 
Adhoc object type). The procedure plan is just a shell 
in our case, simply encapsulating a call to the dynamic 
batch. As you can see, SQL Server did reuse the proce- 
dure plan for the second invocation of the procedure. 
However, you can see that there’s a separate prepared 
statement plan for each unique dynamic batch, meaning 
that the actual query plan wasn’t reused. Think of the 
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implications for performance when the procedure is 
invoked very frequently with different sets of order 
IDs; consider the cost of all those compilations, and 
the memory required to hold all the plans. 

Note that as of SQL Server 2005, recompiles are 
done at the statement level rather than the batch/ 
procedure level; this method enables a RECOMPILE 
query hint (in addition to the existing RECOMPILE 
procedure option). When the RECOMPILE query 
hint is specified, SQL Server doesn’t bother to keep the 
plan in cache. Because with the dynamic SQL solution 
chances for plan reuse are very low to begin with, at least 
you can mitigate the memory pressure issue by adding 
OPTION(RECOMPILE) at the end of the query. Run 
the code in Listing 4 to create the revised stored proce- 
dure (notice the change in GUID as well). 

Then, execute the revised procedure with different 
inputs: 


EXEC dbo.usp_getorders N'10248,10250,10249' ; 
EXEC dbo.usp getorders N'10260,10270,10265,10290" ; 


Query the cached plans: 


SELECT objtype, usecounts, sql 
FROM sys.syscacheobjects -- in 2000 query master 
.dbo.syscacheobjects 
WHERE SQL LIKE '%995F4DF8-6518-47EE-AB9E- 
2E2876DA17ØØ%' 
AND sql NOT LIKE '%sys%'; 


You get the output in Table 3, indicating that although 
the procedure's plan was reused (the shell for the call 
to the dynamic batch), the plans for the prepared state- 
ments weren't cached. 

Control. To work around the problem of limited 
control over the order of the rows in the output, you 
can add an ORDER BY clause to the query to sort 
the output by existing attributes from the Orders table. 
However, there's no straightforward way for you to 
ask to sort the output by the order of appearance of 
the order ID in the input array. For example, given the 
input array 10248,10250,10249, you want the output 
to be sorted with 10248 first, 10250 second, and 10249 
third. Although this task isn't impossible, solutions 
based on the existing implementation of the procedure 
are tricky and inefficient. 


Coming Up 
Although using dynamic SQL to handle an unknown 
number of input elements in a stored procedure is a 
common solution, I don’t recommend it. You should 
consider a less problematic solution, such as using a 
T-SQL split function, a CLR split function, or SQL 
Server 2008's table valued parameters. I'll discuss these 
SOU 
InstantDoc ID 100453 


alternatives in subsequent articles. 
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Change 


ata 
Capture 


New, asynchronous 


CDC solutions improve performance 


Data Capture (CDC), a component of the rela- 
tional database engine that provides change data 
for consuming applications. CDC populates change 
tables by asynchronously reading a given database’s 
transaction log. CDC’s most notable use is for data- 
warehousing apps in which you need to detect and 
process changed data on a recurring basis in extraction, 
transformation, and loading (ETL) processes. With 
CDC, you can detect changed data in source OLTP 
systems that run on SQL Server 2008 without needing 
to implement expensive custom solutions such as time- 
stamps, flags, triggers, and other one-off solutions for 
detecting changed data. 
To begin learning about CDC, let’s enable CDC for 
a particular database. We'll then designate the source 
tables to have their information captured, and there- 
after any changed data will be recorded accordingly. To 
use CDC, you must have SQL Server 2008 Enterprise, 
Developer, or Evaluation editions. 


S QL Server 2008 has a new feature called Change 


What CDC Offers 

When you enable a source table for CDC, you're effec- 
tively creating a capture instance. You can have as many 
as two capture instances per source table. The actual cap- 
ture process is implemented with SQL Server agent jobs 
calling other routines. Any change data detected is then 
inserted into a separate change table per table enabled. 
Once the change data has been made available for con- 
sumption purposes, a consumer (typically an ETL pro- 
cess) will query the change data using system-generated 
functions by either log sequence number (LSN) or time 
ranges. The generated CDC functions provide the change 
data in an easy-to-consume query format. 

You might be wondering when the change tables 
are purged. After all, if the change tables are never 
purged, they can grow to huge proportions. By default, 
CDC purges data from the change data tables after 
it's three days old. Every change table defaults to 
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this three-day purging strategy, which you might not 
always consider optimal. If you need to deviate from 
the default purging strategy, system procedures are 
available for you to do so. If you back up and restore a 
CDC-enabled database, the restored database doesn't 
have CDC enabled by default. 

Finally, CDC offers the ability to capture and 
propagate Data Definition Language (DDL) changes. 
By default, CDC doesn't propagate source-table DDL 
changes to its corresponding change table. The only 
exception to this rule is when you alter the underlying 
data type of a particular column in the source table; the 
change table will automatically have its corresponding 
column type changed. Removed columns simply get 
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NULL values in their change table, and added columns 
are ignored in the change table. 

To enable true DDL propagation, you need to 
create a second capture instance of the source table 
after the DDL statements are issued. This procedure 
will begin capturing change data using the new table 
schema. You will then need to update any consuming 
applications to use the new capture instance. 


Configure CDC 
To configure CDC, you use T-SQL with a SQL Server 
2008 instance. We'll be using the AdventureWorks 2008 
OLTP sample database for our configuration section. 
If you don’t have a copy of the AdventureWorks OLTP 
sample database, you can download a copy at http:// 
www.codeplex.com/MSFTDBProdSamples. Also, 
you'll need SQL Server Agent running. 

The first step is to enable a given database for CDC. 
To do so, you use the 
sys.sp_cde_enable_db ORE on the WEB 

See the web listings and web 


system procedure. 
This procedure cre- tables at InstantDoc ID 100515. 


ates all of CDC's 
related objects, jobs, and so on in the current database, 
as follows: 
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[Create a new SQL Server Integration Services project. 
[ssis_COC_Semple 
[C:\Documents and SettingsjAdministr ator My Documeants\Visual Studio 2008'projects =] Browse... | 


Hamer 
Location: 


CHANGE DATA CAPTURE 


USE [AdventureWorks2008] ; 
GO 
EXEC sys.sp cdc enable db; 


[MET Framewerk3.5 =] SB EE 


Sokition Name: — [sss CDC Sample IV. Create grectory for solution 


Figure I 


Creating a new SSIS 
project 
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consuming SSIS package (i.e., one that consumes the 
change data). I disagree with the current SQL Server 
Books Online (BOL) documentation, which states that 
CDC is a new SSIS technology. CDC is 
a new feature of the relational database 
engine: Any tool that can make a con- 
nection to SQL Server 2008 can use the 
exposed change data. 

First, let’s fire up Business Intel- 
ligence Development Studio (BIDS), 
which is accessible via Start, All Pro- 
grams, Microsoft SQL Server 2008, 
SQL Server Business Intelligence Devel- 
opment Studio. Select File, New, Project 
from the BIDS menu. Next, choose the 
Integration Services Project and type 
ssis_CDC_Sample in the Name textbox, 
as Figure | shows. Click OK to create 


[Do] s | 


To determine whether a database has CDC enabled, we 
can interrogate the sys.databases catalog view. A new 
column called is cdc enabled in the sys.databases view 
is either a 0 (not enabled) or a 1 (is enabled). The fol- 
lowing query determines whether the AdventureWorks 
sample database has been enabled for CDC: 


USE AdventureWorks2ØØ8; 

GO 

SELECT [is cdc enabled] FROM sys.databases 
WHERE [name] = 'AdventureWorks2008' 


Next, we need to create our capture instance(s) by 
usingthesyssp cdc enable table change data capture 
system procedure. This system stored procedure enables 
CDC on a given source table. The procedure that Web 
Listing 1 (www.sqlmag.com, InstantDoc ID 100515) 
shows creates the associated change tables and system- 
generated change-data query functions. 

To determine whether a given table is tracked by 
CDC, you can interrogate the sys.tables catalog view. A 
new column called is tracked by cdc in the sys.tables 
view contains either a 0 (not tracked) or a 1 (is tracked). 
The following query determines whether CDC has 
tracked the Sales.SpecialOffer table: 


USE AdventureWorks2ØØ8; 

GO 

SELECT [is tracked by cdc] FROM sys.tables 
WHERE [name] = 'SpecialOffer' 


Create the CDC-Consuming 
SSIS Package 


Once you've configured CDC, you can create a CDC- 


the new SSIS project. 

Next, we need to set up our package 
before adding Control Flow compo- 
nents. Select View, Other Windows, 
Variables to display the Variables window. Use the Add 
Variable toolbar command to create the variables that 
you see in Web Table 1. Enter the following T-SQL 
code for the value of the SgIDataQuery variable: 


SELECT [SpecialOfferID], [Description], 
[DiscountPct], [Type], [Category], 
[StartDate] , [EndDate] , [MinQty], 
[MaxQty] , [CDC OPERATION] FROM 
udf Sales SpecialOffer(null,null) 


We need to create the package's connection man- 
agers. Right-click in the Connection Managers pane 
(located beneath the Control Flow designer's surface), 
and select the New OLEDB Connection context-menu 
option. Create two new local OLEDB connections; the 
first should reference the AdventureWorks 2008 data- 
base, and the second should reference the Adventure- 
Works DW 2008 database. Name the new connection 
managers Adventure Works and Adventure WorksDW, 
respectively. 

Now that the package is set up, we can delve into 
the actual Control Flow elements. First, copy an 
instance of the Execute SQL Task onto the Control 
Flow designer's surface and rename the task Calculate 
Interval. This task will serve as the entry step toward 
obtaining a datetime range that the system will use 
to determine and process any change data within the 
range. Right-click and select the Edit option on the 
task. Configure the Calculate Interval task as Web 
Table 2 shows. Configure the result sets for the Calcu- 
late Interval task as Web Table 3 shows. 

Click OK to complete the Calculate Interval task. 
Next, we need to place an instance of the For Loop 
container onto the Control Flow surface. Rename 
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CHANGE DATA CAPTURE 


the For Loop container to Wait for Change Data. 
This For Loop container will serve as the looping 
mechanism when change data isn’t yet ready. CDC 
is an asynchronous process; sometimes, no change 
data will be available to be captured. Also, note 
that in my design we use a date interval of six 
minutes ago to one minute ago, so all change data 
we attempt to process will be at least a full minute 
old. Edit the Wait for Change Data container as 
Web Table 4 shows. 

Click OK to complete the Wait for Change 


Data container. At this point, create a default suc- 
cess constraint between the Calculate Interval and the 
Wait for Change data tasks. Your package’s Control 
Flow should now look like Figure 2. 

Next, drag an instance of the Execute SQL task 
inside the Wait for Change Data container. Rename the 
task Check for Data. This task will poll the cdc 
sn time mapping table to determine whether 
change data is ready. Configure the Check for 
Data task as Web Table 5 shows. Enter Web 
Listing 2’s T-SQL code for the SQLStatement 
property, and refer to Web Table 6 for the task’s 
parameter mappings. 

Click OK to complete the Check for Data 
task. Next, drag an instance of the Script Task 
to the Control Flow designer's surface inside 
the Wait for Change Data container. Rename 
the task to Delay in Seconds. This is the task 
used for delaying package execution for the 
case when the change data isn’t yet ready for 
the calculated interval. Configure the Delay in 
Seconds task as Web Table 7 shows, using the 
code in Web Listing 3. 

Next, we need to create a Control Flow con- 
straint between the Check for Data and Delay in 
Seconds tasks. Click the Check for Data task and con- 
nect the task constraint to the Delay in Seconds script 
task. Now, double-click the constraint and configure 
it as Web Table 8 shows. Click OK to complete the 
constraint's configuration. Your package should now 
look like Figure 3. 

Drag another instance of the Script Task to the 
Control Flow surface inside the For Loop container. 
Rename the Script Task Log Extract Error. This task 
serves as the point in the package's Control Flow at 
which we log an error and stop package execution. This 
task will execute when no change data is present for 
our calculated interval. One possible design alternative 
would be to wrap this entire package's functionality 
into a second For Loop container, then simply continue 
polling for change data instead of failing the package. 
You could insert a Script Task or Execute SQL Task to 
delay package execution for five minutes per outer itera- 
tion. Configure the Log Extract Error script task as Web 
Table 9 shows, using the script in Web Listing 4. 
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Next, we need to create a Control Flow constraint 
between the Check for Data and Log Extract Error 
tasks. Click the Check for Data task and connect the 
task constraint to the Log Extract Error script task. 
Now, double-click the constraint and configure it as 


Web Table 10 shows. Click OK to complete the con- 
straint's configuration. We've now completed the work 
that needs to occur inside the Check for Data For Loop 
container. 

Open SQL Server Management Studio (SSMS) and 
create a new query window connected to the Adventure- 
Works OLTP sample database. Execute Web Listing 5's 
T-SQL code to create our custom user-defined function 
(UDF); this function gets called from the next task in 
our SSIS Package. This function returns our example's 
change data by using the Net Changes function for a 
given time period. Notice that the function converts the 
input parameters for the time to their equivalent LSNs. 

Confirm that the function has been created, 
and clear the query window's contents by pressing 
Ctrl Shift Delete. (We’ll need to use SSMS again a 
bit later.) Now, go back to our SSIS package in BIDS 
and drag another instance of the Execute SQL Task 
onto the Control Flow. Rename the new Execute SOL 
task Prepare Query, Use UDF. This task will create 


Figure 2 


Your package's 
Control Flow 


Figure 3 


Completing the 
constraint's 
configuration 
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Figure 4 


The complete 
Control Flow 


Figure 5 


The package's 
Data Flow 
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the actual T-SQL query for obtaining the change data 
using our calculated datetime intervals. Configure 
the Prepare Query, Use UDF task as Web Table 11 
shows, and enter Web Listing 6’s T-SQL code for the 
SQLStatement property. Configure Prepare Query, 
Use UDF parameters as Web Table 12 shows. Finally, 
configure the Prepare Query, Use UDF result set as 
Web Table 13 shows.. 

Next, create a success constraint between the Check 
Jor Data For Loop container and the Prepare Query, Use 
UDF task. Finally, drag an instance of the Data Flow 
task onto the Control Flow designer's surface. Rename 


the task Extract and Load Change Data. Create a basic 
success constraint between the Prepare Query task and 
the Extract and Load Change Data task. With the pack- 
age’s Control Flow complete, it should look like Figure 
4. Next, we'll configure the Data Flow contained within 
the Extract and Load Change Data task. 


Create the Data Flow 
Right-click the Extract and Load Change Data Data 
Flow task, and select Edit. Doing so will open up 


the Data Flow task's corresponding Data Flow 
designer's surface. Drag an instance of the OLEDB 
source from the toolbox to the Data Flow designer's 
surface. Rename the source component Change Data. 
Configure the Change Data source component as Web 
Table 14 shows. 

Click OK to complete the OLEDB source com- 
ponent's configuration. Next, copy an instance of 
the conditional split transformation onto the Data 
Flow designer's surface. Rename the conditional 
split transformation Filter Based on Operation. This 
transformation will redirect each row based on the 
CDC OPERATION column that our custom UDF 
returns. Configure the conditional split transformation 
as Web Table 15 shows. 

Click OK to complete the Filter Based on Operation 
configuration. Next, drag an instance of the OLEDB 
Destination component to the Data Flow designer's 
surface and connect the Data Flow from the Filter 
Based on Operation transformation to the new OLEDB 
destination. The source Data Flow should be Inserted 
Records. Rename the component Process Inserts. 
Configure the Process Inserts destination component 
as Web Table 16 shows. Web Table 17 shows the task's 
column mappings. (Destination columns that don't 
have any inputs from the Data Flow should be set to 
ignore for their corresponding input column.) 

Click OK to complete the Process Inserts compo- 
nent. Next, drag an instance of the OLEDB command 
transformation to the Data Flow designer's surface. 
Rename the new OLEDB command com- 
ponent Process Updates. Connect the Data 
Flow path from the Filter Based on Operation 
transformation to the new Process Updates 
OLEDB command using the Updated 
Records output. Configure Process Updates 
as Web Table 18 shows, and enter Web Listing 
T's T-SQL code for the SqlCommand prop- 
erty. Web Table 19 shows the Process Updates 
column mappings. 

Click OK to complete the Process 
Updates OLEDB command. Finally, drag 
over one more instance of the OLEDB 
command transformation to the Data 
Flow’s surface. Connect the Data Flow 
from the conditional split transformation to 
the new OLEDB command using the Deleted Records 
output. Next, rename the new OLEDB command 
Process Deletes. Configure the new Process Deletes 
OLEDB command as Web Table 20 shows. Enter the 
Web Listing 8's T-SQL code for the SglCommand 
property. Configure Process Deletes column map- 
pings as Web Table 21 shows. 

Click OK to complete the Process Deletes OLEDB 
command configuration. The package’s Data Flow 
should now look like Figure 5. 
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Test the CDC-Consuming 

SSIS Package 

First, build the SSIS package in BIDS. Go to Build, 
ssis CDC Sample. To test our new CDC-consuming 
package, we'll submit a series of UPDATE state- 
ments to the Sales.SpecialOffer table. These T-SQL 
statements emulate a front-end application, letting 
users update the company’s various special offers. 
Web Listing 9’s T-SQL code is to be submitted 
against the AdventureWorks OLTP 2008 database 
inside your original SSMS query window used in the 
above tasks. (You can clear its old content by pressing 
Ctrl+Shift+ Delete.) 

Next, execute the package. If change data was 
found, the package’s Control Flow status should look 
like Figure 6. If you query the DimPromotion table 
in the AdventureWorksDW database, you'll find that 
the corresponding record's DiscountPct is updated as 
well. This confirms that we captured and processed our 
change data from the AdventureWorks OLTP 2008 
database. 


Looking to the Future 
I'm impressed with the new CDC feature built into 
the SQL Server 2008 relational database engine. 


CHANGE DATA CAPTURE 


=» 
== Delay in Seconds 


Overall, the feature is good; it replaces the need to 
create custom CDC solutions and provides increased 
performance over those custom solutions because it's 
asynchronous. If your organization has SQL Server 
OLTP environments, CDC is a great candidate for 
your future incremental ETL solutions! SQL] 
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The package’s Control 
Flow status 
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Integrating SQL Server 2008 
Spatial Capabilities with 
Microsoft Virtual Earth 


Develop a complete spatial solution 


Server 2008 introduces 
exciting possibilities for 
storing and manipulating 


spatial information. For application developers and 
end users, tools such as Microsoft MapPoint and ser- 
vices such as the Live Search Maps website (maps.live 
.com/#) provide many options for visualizing spatial 
data. I want to show you how to put the capabilities 
of SQL Server 2008 together with Microsoft’s Virtual 
Earth platform so you can not only store, query, and 
manipulate spatial information, but also display this 
spatial data. For the examples in this article, I use SQL 
Server 2008 and Visual Studio 2008. First, I'll walk you 
through a comprehensive store locator example. Next, 
I'll give you a quick tour through spatial fundamentals, 
and then we’ll dive into how the example was built. 


Getting Started with 

the Store Locator Example 

To help you understand how to develop an application 
using spatial data types, let's look at an example “store 
locator” application. First, you need to download the 
code for the example: Go to www.sqlmag.com, enter 
100528 in the InstantDoc ID text box, and click the 
100528.zip hotlink. Next, in Visual Studio 2008, open 
theVirtualEarthEg2 website by selecting File, Open, 
Web Site and pointing to the VirtualEarthEg2 folder 
that you’ve downloaded. This website uses the new 
SQL Server 2008 AdventureWorks2008 database, 
which you should download from www.codeplex 
.com/MSFTDBProdSamples. Depending on where 
you install the database, you might need to adjust 
the default database connection property in the web 
config file. 

To view the StoreLocator.aspx web page in a 
browser, first make sure it’s the default page for the 
website by right-clicking the VirtualEarthEg2 project 
in the Solution Explorer and selecting Property Pages. 
Select the Start Options tab, set the Start action to 
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Specific page, and select StoreLocator.aspx in the drop- 
down box. Now, open the VirtualEarthEg2 website in 
a browser by selecting Debug, Start Debugging. In the 
Location box at the bottom of the page you can enter 
a location address. (By default, a zip code is already 
entered.) You can enter a maximum distance in the 
Max Distance box (default of 50 miles). When you 
click Find Store(s) by Location, a set of stores is placed 
on the map. If you hover the cursor over one of the 
stores, the store name, address, and distance from the 
location is displayed, as shown in Figure 1, page 30. 

You build the Store Locator page using the Micro- 
soft Virtual Earth Map Control along with a SQL 
Server 2008 database. When you click Find Store(s) by 
Location, the Map Control finds a longitude/latitude 
coordinate for the address in the Location box. Then 
you can use this value (along with the Max Distance 
value) to query a SQL Server 2008 database. The data- 
base contains store addresses which, in addi- 
tion to typical attributes such as street, city, 
or state names, contains a longitude/latitude 
coordinate. Using the new built-in GEOG- 
RAPHY data type, the Store Locator returns 
a list of stores that are near the location. 


Spatial Primer 

Before I walk you through the code for working with 
the comprehensive Store Locator example, let's take 
a quick look at some fundamentals. The storage, 
manipulation, and visualization of spatial information 
spans a broad and deep set of technologies. I'll cover a 
few basics now, but you can check the online Learning 
Path at www.sqlmag.com, InstantDoc ID 100528 for 
more information. 

Spatial data represents the physical location and 
shape of objects. These objects can range from a 
simple point to complex objects such as a building 
or a country. SQL Server 2008 provides two new 
data types to store spatial data —GEOMETRY and 
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GEOGRAPHY. The GEOMETRY data type assumes 
a flat coordinate system, while the GEOGRAPHY 
data type takes into account the shape of the earth. In 
this article, I work with the GEOGRAPHY data type, 
but remember that both types share many of the same 
methods and properties. 

From an implementation standpoint, GEOG- 
RAPHY and GEOMETRY are CLR types, although 
you don't need to enable CLR on an instance of SQL 
Server to use them. Within your own Microsoft .NET 
Framework applications, you can locally instantiate or 
manipulate the GEOGRAPHY and GEOMETRY 
data types by adding a reference to the Microsoft 
.SglServer. Types.dll assembly. 
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Using the Person.Address Table 
The Person.Address table in the new Adventure- 
Works2008 sample database contains a column of type 
geography, named SpatialLocation. Let's take a closer 
look at the Person.Address table to get familiar with 
spatial data and methods. After opening a new query 
window in SQL Server Management Studio (SSMS), 
execute the following query: 


--Declare and Instantiate a local geography 
variable 

DECLARE @ZipCodeGeog geography = 
geography: :STGeomFromText('Point(-95.3410 
874920231 29.7070506062296)',4326); 


--Select a few rows from the Person.Address 


table 

SELECT TOP(5) A.AddressID AS [ID], 
A.AddressLinel, A.City, 
A.SpatialLocation, 
A.Spatiallocation.AsGml() AS SpatialGML, 
A.SpatialLocation.STAsText() AS 
SpatialText, 
A.SpatialLocation.STGeometryType() AS 
[Type], 
A.SpatialLocation.STNumPoints() AS 
Points, 
(A.SpatialLocation.STDistance(@ 
ZipCodeGeog) / 16Ø9.344ØØ) AS 
DistanceInMi les 

FROM Person.Address A; 


The results of this query are shown in Figure 2. 
This query first declares and instantiates the @Zip 
CodeGeog geography variable using the static/shared 
geography method STGeomFromText. The text value 
*Point(-95.3410874920231 29.7070506062296)’,4326 
represents a point located at a particular longitude and 
latitude. The value 4326 is a spatial reference identifier 
(SRID); for more about SRIDs, see the Learning Path. 
Note that a GEOGRAPHY data type can be instanti- 
ated from text, binary, or XML input. 

Then the query selects five rows from the Person 
„Address table. Several GEOGRAPHY data type 
methods are used to display the SpatialLocation 
column in different formats—the XML format shown 
at the bottom of Figure 2 is the result of clicking one 
of the Spatial XML column values. The last column in 
the query uses the STDistance method to calculate the 
distance in meters (then divides by 1609.344 to derive 
a value in miles) between the location and the @Zip- 
CodeGeog variable. This is the same method used in 
the Store Locator example. 


Choosing a Mapping Service 
Several companies (e.g., Microsoft, Google, Map- 
Quest) provide mapping services, both to the public 
and to organizations. In addition to a traditional 
desktop application (MapPoint), Microsoft provides 
two complementary but different Internet-based ser- 
vices for working with and displaying spatial informa- 
tion: The MapPoint Web Service provides location, 
routing, and rendering functionality. The Virtual 
Earth platform lets developers use integrated services 
to create online experiences via maps and geospatial 
imagery. Å major component of this platform is the 
Virtual Earth Map Control, which contains objects, 
methods, and events you can use for displaying maps 
in an application. Microsoft itself uses this platform to 
deliver the maps.live.com website. 

The major differences between the MapPoint and 
Virtual Earth services have to do with programmability 
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and rendering. You'll find the MapPoint Web Service, 
with its Simple Object Access Protocol (SOAP) API, 
easier to integrate with back-end processing. From a 
rendering perspective, the Virtual Earth Map Control 
returns interactive maps that an end user can easily 
move, zoom, and so on. Maps rendered using the Map- 
Point Web Service are static pictures (without further 
development effort). In this article, I focus on the 
Virtual Earth Map Control—although I also include a 
sample application that uses the MapPoint Web Service 
for geocoding/static map rendering. Note that both 
services, when deployed in a production environment, 
require a valid license. See the online Learning Path for 
more about licensing requirements. 


Using the Virtual Earth 
Map Control 

Virtual Earth provides an API via the Virtual Earth Map 
Control, which is actually an AJAX control. This means 
that coding against the API is done with JavaScript. 
For more on developing with JavaScript, see the web- 
exclusive sidebar “JavaScript Development,” 
InstantDoc ID 100533. 

Let's get started with a very simple example— 
displaying a map in a web page. Open the first sample 
website, VirtualEarthEgl, in Visual Studio 2008. 
Select File, Open, Web Site and point to the Vir- 
tualEarthEg! folder on your machine. Open the 
Default ShowMap.aspx web page in a browser 
by selecting Debug, Start Debugging. You'll see 
a web page that's completely interactive. You can 
move it around, zoom in and out, switch between 
views, and so on. 

After closing the browser window, in Visual 
Studio open the Default ShowMap.aspx web page 
(double-click the file in the Solution Explorer) to 
view the source code. (See Listing 1, page 32.) 
The Virtual Earth Map Control is declared and 
included (on line 8) using the following script: 


«script type-"text/javascript" 
src="http://dev.virtualearth.net/ 
mapcontrol/mapcontrol.ashx?v=6.1"> 


In the GetMap() function (line 12), we instantiate 
a variable (named map) of type VEMap and call 
the LoadMap() function to display the map: 


function GetMapO I 
map = new 
VEMap('myMap') ; 
map.LoadMapO ; 
I 


After the body of the web page is loaded into the 
browser, the GetMap() function is called (line 18): 


<body onload="GetMap() ; "> 
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I encourage you to try debugging the JavaScript in 
this file. (At some point in your use of the Map Con- 
trol, you'll want the ability to step through your script 
code.) Set a breakpoint in the GetMap() function by 
right-clicking the first line of the function and selecting 
Breakpoint, Insert Breakpoint. Then, select Debug, 
Start Debugging to open the Default_ShowMap.aspx 
web page in a browser. If Visual Studio displays a mes- 
sage about a setting in Microsoft Internet Explorer (IE) 
that you need to change in order to debug the script, 
then follow the directions and try again. 

I've included several other web page samples (in 
the SimpleExamples folder of the website) that dem- 
onstrate how to manipulate the Map Control after 
you load it. For example, AddPolygonToMap.aspx 
shows how to add a shape (here a polygon) to a map. 
ShowASpecificMap.aspx, as the name implies, demon- 
strates how to load a specific map given a latitude and 
longitude coordinate. To get a better understanding 
of the various objects and methods available in the 
Map Control, be sure to visit the interactive software 
development kit (SDK) available at dev.live.com/ 
virtualearth/sdk. Then, open my next sample website, 
VirtualEarthEg2, in Visual Studio. 
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LISTING 1: Default ShowMap.aspx Source Code 


<%@ Page Language="VB" AutoEventWireup="false" CodeFile="Default ShowMap.aspx.vb" Inherits=" Default" %> 
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.Ø Transitional//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtmll-transitional.dtd"> 


«html xmlns="http://www.w3.0rg/1999/xhtml"> 
<head runat="server"> 
<title>Example 1 - Show a Map</title> 


<meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> 
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<script type="text/javascript" src="http://dev.virtualearth.net/mapcontrol/mapcontrol.ashx?v=6.1"> 


</script> 
<script type="text/javascript"> 
var map = null; 
function GetMapO I 
map = new VEMap('myMap') ; 
map.LoadMapO ; 
b 
</script> 
</head> 
«body onload="GetMap();"> 
<form id="form1" runat="server"> 
<div>Show a Map:</div> 


«div id='myMap' style="position:relative; width:8ØØpx; height:5ØØpx;"></div> 


</form> 
</body> 
</html> 


LISTING 2: HTTP Handler ProcessRequest Function 


' This handler is called whenever a "file" ending in .georss is requested. 
Public Sub ProcessRequest(ByVal context As System.Web.HttpContext) Implements System.Web.IHttpHandler.ProcessRequest 


Try 


Dim oRequest As HttpRequest = context.Request 


Dim oResponse As HttpResponse = 


context.Response 


oResponse.ContentType = "text/xml" 
oResponse.ContentEncoding = System.Text.Encoding.UTF8 


'Parse the page name and querystring 
Dim sPageName As String = System.IO.Path.GetFileNameWithoutExtension(oRequest.Path) . ToLower 


Select Case sPageName 


Case "sample" 'load a set of static sample data 
oResponse.Write(ReturnSampleFeed()) 


av 9 


Case "getaddress 


get a particular store for a given AddressID... 


Dim iAddress As Integer = CType(oRequest.QueryString("addressid"), Integer) 

oResponse.Write(GetAddress(iAddress)) 
Case "storelocator" ‘locate store(s) that are within a certain distance of a given location 

Dim sLatLong As String = CType(oRequest.QueryString("location"), String) 

Dim iLocateThreshold As Integer = CType(oRequest.QueryString("maxdistance"), Integer) 

oResponse.Write(FindStoresByLocation(sLatLong, iLocateThreshold) ) 


End Select 
Catch ex As Exception 
Console.WriteLine(ex.ToString) 
End Try 
End Sub 


Loading Spatial Data 


from SQL Server 

The VirtualEarthEg2 website contains four web 
pages: Default.aspx, StoreLocator.aspx, and two aspx 
pages in the ImportData folder. In the source code 


SQL Server 2008 provides two new 
data types to store spatial data— 
GEOMETRY and GEOGRAPHY. 
The GEOMETRY data type 
assumes a flat coordinate system, 
while the GEOGRAPHY data 

type takes into account the 

shape of the earth. 
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for Default.aspx, you'll 
notice a reference to a 
custom script file (Map- 
Script.js) that contains the 
code necessary to load the 
map. I’ve simply done this 
for reusability purposes— 
all the aspx pages use this 
script file. 

So far, you’ve seen how 
to load a map in a web 


page and use methods to manipulate it. Now let’s 
tackle the (seemingly) simple problem of adding and 
displaying spatial data on the map. First you need to 
understand two concepts, shape and shape layer. The 
Map Control supports three shapes you can add to 
a map—pushpin, polyline, or polygon. Pushpin is 
analogous to a point; this is the type of shape we'll be 
working with. You can add a shape either directly to 
the map (on the map's base layer) or to a custom shape 
layer. A shape layer lets you create or manage a collec- 
tion of shapes that can be layered on top of the Map 
Control's base layer. 

The Map Control provides two sets of methods 
for importing shapes. The AddShape and AddShape- 
Layer methods add either a single shape or a few 
shapes at a time. The ImportShapeLayerData method 
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lets you point to and import a remote collection 
of shapes. You can use either method to get shape 
data from a remote source (such as a SQL Server 
database). However, because were working with an 
AJAX control in the example, we need to request (and 
process) the remote data from within our JavaScript 


code. 


I settled on ImportShapeLayerData for importing 
data from SQL Server. Using ImportShapeLayerData 


requires relatively little JavaScript code, and it’s effi- 
cient for importing a large number of shapes. To 
see an example of calling the ImportShapeLayer- 
Data function, view the ImportShapesFromFile 
.aspx file (located in the ImportData folder) 
in your browser. ImportShapesFromFile.aspx 
uses a static file, GeoRSSTest.xml, as its data 
source. GeoRSSTest.xml is an XML document 
representing a collection (or feed) of locations, 
with a schema based in part on the GeoRSS 
standard. (For information about this standard, 
see WWw.georss.org.) 

There’s a problem with ImportShapeLayer- 
Data: It expects a remote file as a data source. 
But a remote file is a static source of data, and 
we want to dynamically return data from a data- 
base. To get around this problem, I’ve written a 
simple HTTP handler that emulates a file but 
lets you dynamically load data. The code for the 
handler is in the GeoRSSHandler.vb file (located 
in the App_Code folder of the VirtualEarthEg2 
web- site). To learn more about developing HTTP 
handlers in .NET, see the Visual Studio 2008 
topic “HTTP Handlers and HTTP Modules 
Overview” at msdn.microsoft.com/en-us/library/ 
bb398986.aspx. 

Now let’s open the file ImportShapes- 
FromSQL.aspx in the browser. If you look at 
the accompanying JavaScript for this page (line 
8 in the ImportShapesFromSQL.js script file), 
you'll notice were using a “file” named sample 
.georss as the data source: 


var geoRssLayer = new 
VEShapeLayer() ; 
veLayerSpec = new 
VEShapeSourceSpeci fication( 
VEDataType. 
GeoRSS, 
"sample. 
georss", 
geoRssLayer); 


map.ImportShapeLayerData(veLaye 
rSpec, onFeedLoad, 1); 
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The sample.georss file doesn’t exist. Our HTTP 
handler intercepts all requests for files ending in .georss 
so we can build a “file” on the fly (see Listing 2). It 
turns out that the data returned from the “file” sample 
.georss is also static. (I've hardcoded an XML variable 
in the ReturnSampleFeed function.) But we now have 


a framework for building dynamic content. With the 


ImportShapesFromSQL.aspx page still open in the 
browser, click the Get Store by AddressID button. 
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LISTING 3: GetAddress Function 
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"Find a Store by its AddressID. 


Private Function GetAddress(ByVal AddressId As Integer) As String 

Dim oSQLConn As SqlConnection = Nothing 

Try 
'Open a connection and prepare our command 
oSQLConn = New SqlConnection(ConfigurationManager.ConnectionStrings ("default").ConnectionString) 
oSQLConn.Open() 
Dim oSQLComm As New SqlCommand(AddressSQLQuery, oSQLConn) 
'Set Parameter values 
Dim oParam As SqlParameter = 
oParam.Value - AddressId 
'Execute command to return results 
Dim oSQLDataReader As SqlDataReader = oSQLComm.ExecuteReader 
'Format the results into the GEORSS xml format that Virtual Earth can understand 
Return FormatGeoRSS(oSQLDataReader).ToString 


oSQLComm.Parameters.Add("AddressId", Data.SqlDbType.Int) 


Catch ex As Exception 
Throw ex 
Finally 
If Not oSQLConn Is Nothing Then 
If oSQLConn.State «» Data.ConnectionState.Closed Then oSQLConn.Close() 
oSQLConn.Dispose() 
oSQLConn = Nothing 
End If 
End Try 
End Function 


Private Function AddressSQLQuery() As String 


"SELECT Store.Name AS title, PA.AddressLinel + '«br/»' + PA.City + ', ' 


"FROM 


"WHERE 


Return . 
+ St.StateProvinceCode + ', ' + 
PA.PostalCode AS [description], " & _ 
PA.SpatialLocation.AsGm1() AS gml " & _ 
Sales.Store INNER JOIN " & . 
Person.BusinessEntityAddress BEA ON Store.BusinessEntityID = BEA.BusinessEntityID " & _ 
AND BEA.AddressTypeID = 3 /* Main Office */ "& _ 
INNER JOIN " & _ 
Person. [Address] PA ON BEA.AddressID = PA.AddressID " & _ 
INNER JOIN " & _ 
Person.StateProvince St ON PA.StateProvinceID = St.StateProvinceID " & _ 
PA.AddressID = @AddressID;" 
End Function 


This action calls the following JavaScript: a better understanding of the underlying technology. 
I discovered that a few of the longitude/latitude 
values in the AdventureWorks2008 database are 
invalid (i.e, they don't match the address data). I 
fixed these problems with an application that uses 
the MapPoint Web Service. For more information, 


see the web-exclusive sidebar “Using the MapPoint 


var geoRssLayer = new VEShapeLayer(); 


veLayerSpec = new 
VEShapeSourceSpeci fication( 
VEDataType.GeoRSS, 


"getaddress. Web Service to Fix a Bug in AdventureWorks2008” at 
georss?addressid-" + AddressID, InstantDoc ID 100534. Running the sample I discuss 
geoRssLayer) ; in the web-exclusive sidebar requires a username and 


Getaddress.georss is intercepted by the HTTP han- 
dler, which invokes a call to SQL Server to return 
address information for a given AddressID. Listing 
3 shows the code that returns an address for a given 
AddressID. The SQL-specific code is embedded in the 
AddressSQLQuery function. We pull back the store 
name and address for descriptive purposes, and the 
spatial column is returned in an XML format via the 
AsGml() method. 

Finally, you can again view the StoreLocator.aspx 
page, our comprehensive example. I hope you now have 


password for the MapPoint Web Service. You can 
learn more about obtaining a Virtual Earth Platform 
Developer Account at https://mappoint-css.live.com/ 
mwssignup. 


A Complete Spatial Solution 

The GEOGRAPHY and GEOMETRY data types in 

SQL Server 2008 are a great way to store, query, and 

manipulate spatial information. To display spatial data 

use services such as Virtual Earth. Use both platfoms 

to deliver a complete spatial solution. SOU 
InstantDoc ID 100528 
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(motey@ sqlmag.com) is technical director 
for Windows IT Pro and SQL Server Magazine 
and author of Microsoft SQL Server 2008 New 

Features (Osborne/McGraw-Hill). 


henever I'd ask my father what a certain word 
meant, he would send me directly to a dic- 


tionary to look it up my-own-darn-self. | guess Kalen 
Delaney must have been talking toy ded, because 


her July 2008 web-excl 
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ou can find many articles, white papers, and 

books demonstrating the myriad features found 
in SQL Server 2008. But you might not realize that 
there’s a big disparity in the features that the different 
editions support. Chances are that the exciting new 
features you're reading about are supported only by 
SQL Server 2008 Enterprise Edition or SQL Server 
2008 Developer Edition. (Although Enterprise Edi- 
tion and Developer Edition share the same feature 
set, Developer Edition is licensed solely for develop- 
ment work and can’t be used for production work.) 
Here’s a list of the 20 most important features—yes, 
there are even more features than that—offered only 
in Enterprise Edition. 


l. Hot-add CPU—tecognizes newly added CPUs 
without a restart 

2. Hot-add RAM—recognizes additional RAM 
without a restart 

3. More instances—up to 50 named instances (other 
editions support only 16) 

4. Data compression—automatically compresses 
database data 

5. Transparent database encryption—encrypts 
databases without making application 
changes 

6. Resource governor—allocates system resources 
per workload 

7. Partitioning—divides large tables and indexes into 
multiple file groups for better performance 
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8. Partition table parallelism—uses separate 
threads for queries over multiple partitions 
9. Asynchronous mirroring mode—SQL Server 

2008 Standard Edition supports only synchro- 
nous database mirroring 

10. More failover clustering nodes—up to 16 nodes 
(Standard Edition supports two nodes) 

I I. Database snapshots—for capturing point-in- 
time database copies 

12. Fast recovery—system availability at the end of 
the transaction-log roll-forward phase 

13. Online indexing—rebuilds indexes while the base 
table is in use 

14. Online restore—restores file groups while a data- 
base is active 

15. Distributed partitioned views—creates scale-out 
clusters by dividing tables between multiple SQL 
Server systems 

16. Filtered indexes—lets you selectively index 
column values 

17. Oracle replication publishing—lets Oracle act as 
replication publisher 

18. Peer-to Peer (P2P) transactional replication— 
replicates data changes to all nodes on the network 

19. Advanced transformations—adds SQL Server 
Integration Services transformations such as 
Fuzzy Lookup and Data Mining 

20. Change data capture—ability to track changes on 
a table and capture them to a mirrored table EF 
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“Our auditors visit quarterly and have been very pleased with the level of tracking and 


reporting that we have — thanks to SOL compliance manager.” 


COMPLIANCE 


“SQL compliance manager is a perfect solution for auditing high-transaction servers. 


It allows us to monitor any changes and attempted changes by users, date and system.” 


AUDITS PASSED. 


* Unlike other products, SOL compliance manager was ready-to-use right out of the box! 


But it is also very easy to customize in the future if we wish.” 
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Download SOL compliance manager free 14-day trial today! 


www.idera.com/SQLcompliance 


